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Abstract 



We show that Nechiporuk's method [14] for proving lower bound for Boolean for- 
Q_ij mulas can be extended to the quantum case. This leads to an f2(n 2 /log 2 n) lower 

y bound for quantum formulas computing an explicit function. The only known previ- 

ous explicit lower bound for quantum formulas [15] states that the majority function 
qh does not have a linear-size quantum formula. 

> : 

^ ■ 1 Introduction 

a, 

Computational devices based on quantum physics have attracted much attention lately, and 
quantum algorithms that perform much faster than their classical counterparts have been 



developed || [10], [TTJ]. To provide a systematic study of the computational power of quantum 
devices, models similar to those for classical computational devices have been proposed. 
Deutsch |5j formulated the notion of quantum Turing machine. This approach was further 
developed by Bernstein and Vazirani ||, and the concept of an efficient universal quantum 
Turing machine was introduced. As in the case of classical Boolean computation, there is 
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also a quantum model of computation based on circuits (or networks). Yao [15| proved that 
the quantum circuit model, first introduced by Deutsch ||, is equivalent to the quantum 
Turing machine model. 

Since every Boolean circuit can be simulated by a quantum circuit, with at most a 
polynomial factor increase in its size, any nontrivial lower bound for quantum circuits could 
have far reaching consequences. In classical Boolean circuit theory, all nontrivial lower 
bounds are for proper subclasses of Boolean circuits such as monotone circuits, formulas, 
bounded-depth circuits, etc. In the quantum case also it seems that the only hope to prove 
nontrivial lower bounds is for proper subclasses of quantum circuits. So far the only such 
known lower bound has been derived by Yao [15] for quantum formulasQ The quantum 
formula is a straightforward generalization of the classical Boolean formula: in both cases, 
the graph of the circuit is a tree. Yao has proved that the quantum formula size of the 
majority function MAJ„ is not linear^; i.e., if L(MAJ n ) denotes the minimum quantum 

formula size of MAJ n then lim n (00 L(MAJ n )/?i = oo. This bound is derived from a 

bound on the quantum communication complexity of Boolean functions. 

In this paper, we prove an almost quadratic lower bound for quantum formula size. 
The key step in the derivation of this lower bound is the extension of Nechiporuk's method 
to quantum formulas; for a detailed discussion of Nechiporuk's method in the Boolean 
setting see [[/], |14|- Nechiporuk's method has been used in several different areas of Boolean 
complexity (e.g., see @] for details). It has also been applied to models where the gates 
do not take on binary or discrete values, but the input/output map still corresponds to a 
Boolean function. For example, in this method has been used to get a lower bound 
for arithmetic and threshold formulas. The challenging part of this method is a step that 
we shall refer to as "path squeezing" (see Section ^ for the exact meaning of it). Although 
in the case of Boolean gates, this part can be solved easily, in the case of analog circuits 



it is far from obvious (see ||12[). For the quantum formulas "path squeezing" becomes 



even more complicated, because here we should take care of any quantum entanglement 
and interference phenomenon. We show that it is still possible to squeeze a path with 
arbitrary number of constant inputs to a path with a fixed number of inputs. This leads 
to a lower bound of VL{n 2 / dog 2 n) on the size of quantum formulas computing a class of 
explicit functions. For example, we get such a bound for the Element Distinctness function 

1 There are exponential lower bounds on the time of quantum computation for the black-box model 
(see, e.g., [^)), but they do not apply to the size of quantum circuits. 
2 The value of MAJ„(a;i, . . . , x n ) is 1 if at least \n/2] of inputs are 1. 
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ED n . The input of ED n is of the form (zi, . . . , zg), where each Zj is a string of 21og£ bits. 
Then ED n (zx, ... , zg) = 1 if and only if all these strings are pairwise distinct. 

In this paper we use the notation | • | for two different purposes. When a is a complex 
number, \ot\ denotes the absolute value of a; i.e., |a| = y/a ■ a*. While if X is a set then 
\X\ denotes the cardinality of X. 

2 Preliminaries 

A quantum circuit is defined as straightforward generalization of acyclic classical (Boolean) 
circuit (see ||). For constructing a quantum circuit, we begin with a basis of quantum gates 
as elementary gates. Each such elementary gate with d inputs and outputs is uniquely 
represented by a unitary operation on C 2 . The gates are interconnected by quantum 
"wires". Each wire represents a quantum bit, qubit, which is a 2-state quantum system 
represented by a unit vector in C 2 . Let {|0) , |1)} be the standard orthonormal basis of 
C 2 . The |0) and |1) values of a qubit correspond to the classical Boolean and 1 values, 
but a qubit can also be in a superposition of the form a |0) + (3 |1), where a, (3 G C and 
| o; | 2 + \/3\ 2 = 1. Each gate g with d inputs represents a unitary operation U g G XJ(2 d ). 
Note that the output of such gate, in general, is not a tensor product of its inputs, but 
an entangled state; e.g., a state like ^= 1 00) + |11) which can not be written as a tensor 
product. 

If the circuit has m inputs, then for each d-input gate g, the unitary operation U g G 
U(2 d ) can be considered in a natural way as an operator in U(2 m ) by acting as the identity 
operator on the other m — d qubits. Hence, a quantum circuit with m inputs computes a 
unitary operator in U(2 m ), which is the product of successive unitary operators defined by 
successive gates. 

In this paper, we consider quantum circuits that compute Boolean functions. Consider 
a quantum circuit C with m inputs. Suppose that C computes the unitary operator Uc G 
U(2 m ). We say C computes the Boolean function /: {0,1}™ — > {0,1} if the following 
holds. The inputs are labeled by the variables x 1 ,x 2 ,--- ,x n or the constants |0) or |1) 
(different inputs may be labeled by the same variable Xj). We consider one of the output 
wires, say the first one, as the output of the circuit. To compute the value of the circuit at 
a = («i, . . . ,a n ) G {0, l} n , let the value of each input wire with label Xj be \oij). These 
inputs, along with the constant inputs to the circuit, define a vector \a) in C 2 . In fact 
this vector is a standard basis vector of the following form (up to some repetitions and a 
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permutation) 



I a) = ® • • • <g> |a„) ® |0) ® • • • <g> |1) 

The act of the circuit C on the input \a) is the same as Uc{\a)). Note that since {7c 
is unitary, ||C/ c (|a))|| = I. We decompose the vector Uc(\a)) G C 2 with respect to the 
output qubit. Let the result be 

U c (\a)) = \0)®\A o ) + \l)®\A 1 ). 

Then we define the probability that C outputs 1 (on the input a) as p a = |||Al)|| 2 , i.e., the 
square of the length of \Ai) G C 2 ™ \ Finally, we say that the quantum circuit C computes 
the Boolean function / if for every a G {0, 1}™, if f(u) = 1 then p a > 2/3 and if /(a) = 
then p a < 1/3. 



Following Yao [jig] , we define quantum formulas as a subclass of quantum circuits. A 
quantum circuit C is a formula if for every input there is a unique path that connects it 
to the output qubit. To make this definition more clear we define the computation graph 
of C, denoted by Gc- The nodes of Gc correspond to a subset of the gates of C . We start 
with the output gate of C, i.e., the gate which provides the output qubit, and let it be a 
node of Gc- Once a node v belongs to Gc then all gates in C that provide inputs to v are 
considered as adjacent nodes of v in Gc- Then C is a formula if the graph Gc is a tree. 
Figure |l] provides examples of quantum circuits of both kinds, i.e., circuits that are also 
quantum formulas, and circuits that are not formulas. 

All circuits that we consider are over some fixed universal quantum basis. The lower 
bound does not depend on the basis; the only condition is that the number of inputs (and 
so the number of outputs) of each gate be bounded by some fixed constant number (this 
condition is usually considered as part of the definition of a quantum basis). For example, 
this basis can be the set of all 2-input 2-output quantum gates, and as as it is shown in 
IjJ, this basis is universal. 

For our proof we also need a Shannon-type result for quantum circuits. Knill || has 
proved several theorems about the quantum circuit complexity of almost all Boolean func- 
tions. We will use the following theorem. 

Theorem 2.1 || The number of different n-variable Boolean functions that can be com- 
puted by size N quantum circuits (n < N ) with d-input d-output elementary gates is at 
most 2 cNXogN , where c is a constant which is a function of d. 
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Figure 1: Quantum circuits and their computation graphs; the top circuit is not a formula 
while the bottom one is a formula. 

For the sake of completeness, in the Appendix we have provided a proof for a slightly 
weaker bound. Our approach is different from that in || and it seems it is shorter and 
simpler than his proof. Although the bound that we get is a little weaker than the bound 
provided by the above theorem (it is of the form 2 0(raAr) ), our bound results in the same 
bound if log(iV) = O(n). Thus our result provides the same bound for the complexity of 
the most difficult function and the bound we get in this paper. 

We also need to consider orthonormal bases in the space C 2 ™ other than the standard 
basis. In the context of quantum physics, we identify the Hilbert space C 2 as the tensor 
product space ®j=i an d the standard basis consists of the vectors 

|ci) <g> |C 2 ) <g> • • • <S> \c n ) = \ciC 2 ■ ■ ■ Cn) , Cj G {0, 1}. 

The next lemma provides a method to construct other sets of mutually orthogonal unit 

on 

vectors m (L . 

Lemma 2.2 Let \Aj) G C 2 and \Bj) G C 2 for j = 1,2. Then for the length and inner 
product of the vectors \Aj) £g> \Bj) G C 2 + we have 

lll^i)® = ||L4i)|| • 

and if \xx) = \Ai) (g> \Bi) and \x2) = <8> I-B2) then 

(x 1 \x 2 ) = (A 1 \A 2 )-(B 1 \B 2 ). 



5 



Proof. Suppose that \A X ) = Y.ce{o,i} k a ^ l c ) and l-^i) = Sde{o,i} m @ d l 6 ^' Then 

® Yl E oi c f3 d \c)®\d) 

ce{0,l} fc o!G{0,l} m 

= E E ww 

ce{o,i} fc de{o,i} m 



( E M 2 ) • ( E ia-i 2 ) 

v ce{o,i} fc 7 v rfG{o,i} m 7 
IIWHIWll- 



The proof in the case of the inner product is similar. □ 

The above lemma can easily be generalized to the families of more than two vectors, 
and the generalized version is stated below. 

Lemma 2.3 Let \Aj) G C 2 * and \Bg) £ C 2 ™ be unit vectors (for j and £ in some index 
sets). If \Aj) are pairwise orthogonal and \Be) are pairwise orthogonal then the family 



Aj) g> \B t ) e 



i2 k+r ' 



is an orthonormal set. 



The following lemma, although seemingly obvious, is crucial for the "path squeezing" 
technique in the proof of the lower bound. 

Lemma 2.4 (a) Suppose that C is a subcircuit of a quantum circuit. Let the inputs of C 
be divided into two disjoint sets of qubits Qi and Q2- Suppose that each gate of C either 
acts only on qubits from Qi or only on qubits from Q2- Then there are subcircuits C\ and 
C*2 such that Cj acts only on qubits from Qj and the operation of C is the composition of 
operations of C\ and C<i no matter in which order they act; i.e., C = C\ 0C2 = C2 o C\. 
So the subcircuit C can be substituted by C\ and C2 (see Figure 0/ 

(b) Let C be a quantum subcircuit with distinct input qubits q and r±, . . . ,r t . Suppose 
that only t gates gi, ■ ■ ■ ,gt in C act on q and each gj acts on q and rj. Then, w.l.o.g., we 
can assume that each qubit Tj after entering the gate gj will not interact with any other 
qubit until the gate g t is performed (see Figure 
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Ci 



Co — — c< 



Figure 2: Decomposition of a quantum subcircuit acting on disjoint sets of qubits 
(Lemma |2T^ (a)). 




postponed 
gates 



Figure 3: Postponing the gates (Lemma |2.4| (b)). 



Proof. Part (a) is based on the following simple observation. If M G U(2 m ) and 
N E U(2 n ) then 

M ® N = (M <g> I n ) o (J m <g) TV) = (I m ®N)o (M <g> J n ), 

where is the identity map in U(2'). Note that the inputs of the subcircuit C may be in 
an entangled state; but to see that the equality C = C\ o C2 = C2 Ci holds, it is enough 
to check this equality for the standard basis and extend it to the whole space by linearity. 

Part (b) follows simply from part (a); as in Figure part (a) can be applied on subcircuit 
consisting of gates h 2 and h 3 . Note that in this case also input qubits rj of g/s may be in 
an entangled state. Again a linearity argument shows that we have to consider only the 
case that r/s are in a product state. □ 
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ho 



Figure 4: Changing the order of gates (Lemma |2.4j (b)). 

3 The lower bound 

Let f(x\, . . . , x n ) be a Boolean function, and let X = {xi, . . . , x n } be the set of the input 
variables. Consider a partition {Si, . . . , Sk} of X; i.e., X = |Ji<j<fc &j an d Sj 1 n Sj 2 = 0, 
for ji 7^ j 2 - Let rij = \Sj\, for j — 1, . . . ,k. Let E 3 - be the set of all subfunctions of / on Sj 
obtained by fixing the variables outside Sj in all possible ways. We denote the cardinality 
of Ej by <jj. 

As an example, we compute the above parameters for the Element Distinctness function 
ED n (see ||). Let n = 2l\o<gl (so I = Q(n/ logn)) and divide the n inputs of the function 
into i strings each of 2 log I bits. Then the value of ED n is 1 if and only if these I strings 
are pairwise distinct. We consider the partition (Si, ... , Sg) such that each Sj contains all 
variables of the same string. Thus rij = \Sj\ =2 log i. Each string in Sj represents an integer 
from the set {0, 1, . . . , £ 2 — l}. The function ED n is symmetric with respect to S^-'s; so |Ej| = 
|E 3 -/|. To estimate |Ei|, note that if the strings (z 2 , . . . ,zg) in 5*2, . . . , Si represent distinct 
integers then the corresponding subfunction is different from any subfunction corresponding 
to any other string. So Oj = |Ei| > (/ J > . 

Theorem 3.1 Every quantum formula computing f has size 

logfo) 



n E 



Proof. We give a proof for any basis consisting of 2-input 2-output quantum gates. 
The proof for the other bases is a simple generalization of this proof. 

Let F be a formula computing /. Let Sj be the set of input wires of F labeled by a 
variable from Sj, and let Sj = \Sj\. Then 

s\ze(F)={l(j2 s j)- (!) 
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Figure 5: The qubits q% and q 2 are strong companions at step £, the qubits q% and qs are 
companions at step £ + 2. 

We want to consider the formulas obtained from F by letting the variable inputs not in 
Sj to some constant value |0) or In this regard, let Pj be the set of all paths from an 
input wire in Sj to the output of F. Finally, let Gj be the set of gates of F where two 
paths from Pj intersect. Then \Gj\ < Sj. 

Let p be an assignment of |0) or |1) to the input variable wires not in Sj. We denote 
the resulting formula by F p . Thus F p computes a Boolean function f p : {0, 1}" J — > {0, 1} 
which is a subfunction of / and a member of Sj. Consider a path 

* = (#1,02, • • • ,g m ), m>2, (2) 

in F p , where g\ is an input wire or a gate in Gj, g m is a gate in Gj or the output wire of 
F, and ge £ Gj for 1 < £ < m. 

To show how we can squeeze paths like (0) (this is the essence of the Nechiporuk's 
method), we introduce the following notations. We consider a natural ordering 71, 72, • • ■ , 7t 
on the gates of the formula F p , and regard F p as a computation in t steps where at step I 
the corresponding gate 7^ is performed. We say two qubits q\ and q2 are strong companions 
of each other at step I if there is a gate jj such that j < £ and qi and q 2 are inputs of jj. 
We say qubits q\ and q 2 are companions of each other at step £ if there exists a sequence 
ri, r 2 , . . . ,r p of qubits such that r\ = q%, r p = q 2 , and Tj and r J+1 (for 1 < j < p — 1) are 
strong companions of each other at step £ (see Figure |5|). If q± and q 2 are companions at 
step £ then they are also companions at any step after £. For a gate g, we define the set of 
companions of g as the union of all companions of input qubits of g. 

Suppose that in the path (Q) g\ = 7 J0 , g m = 7^, the inputs of #1 are q and 51, the 
output of 7 J0 from the path (§) is the qubit go, and the input of 7^ not from the path (§) is 
the qubit Note that go is the companion of q 2 at step ji. Let Q v be union of all sets of 
companions of gi, . . . , g m -i at step j 1 minus g and gi (see Figure ||). Let C be the circuit 
defined by the gates gi, ■ ■ ■ ,g m -i from the path (|j). Suppose that \Q n \ = v and consider 
Co as an operation acting on H = C 2 <8> C 2 ® C 2 , where |«o) ® ® |a) G 7i denotes the 
state of go, gi, and the companion qubits in Q w , respectively. Note that all qubits in Q v are 
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Figure 6: Squeezing a path. 

constant inputs of F p and do not intersect any other path like @, because F is a formula. 
So the input \a) of the subcircuit C is the same for all |a ) and \ai). Therefore, we could 
substitute the subcircuit Co by Co such that on input \a>o) \ax) |0 • • • 0), the subcircuit Co 
first computes |a ) \a>i) \a) then applies the action of C . Suppose that the act of C be 
defined as follows 

|a )® |0 - • - 0> — > l c o)®|ci)® |^c ,c?>, (3) 

c ,cie{o,i} 

where olq,oli G {0,1} and lA^ '^ 1 ) G C 2 may be not a unit vector. Let A* Q C 2 be 
the vector space spanned by jA^ ^ 1 ), for ao, ai, Co, ci G {0,1} and ci = dim(^4 7r ). Then 
1 < d < 16. Let |Af ) , . . . , | A J) be an orthonormal basis for A n . Then we can rewrite (|3|) 
as follows 

[«b>® lotOolO-.-O) — . ^ ^ A-;- |c ) ® |c x ) ® . (4) 

c ,ciS{0,l} l<J<o! 

Let TVItt be the set of those unitary operations that are performed after one of the gates 
gi, . . . , g m -i on some qubits in Q n before the step j\. Since qubits in Q n do not interact with 
any other path of the form @, by Lemma |2.4| (b), we can postpone all operations in Ai n 
after we computed the output of g m . Let 7Ti, . . . , Tr k be a natural ordering on the paths in Pj 
(i.e., the last gate of iTj + \ is not performed before the last gate of ttj). Consider the sets of 
postponed operations A4 ni , . . . , M.^^ Once again Lemma pT4] implies that we can postpone 
operations in Ai ni after the last gate of 7T2, and so on. Repeating this argument shows that 
we can postpone all operations in JA ni , . . . ,-M nk after we compute the output qubit. In 
this way, the state of the output qubit, before the postponed operations A4 7Tl , . . . ,Ai nk is 
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applied, is of the form 

|0)<g> |M) + |l)<g> \N), (5) 

where the first qubit is the output qubit and \M) and |7V) are superpositions of tensor 
products of orthonormal vectors |^4j?) used in (^). By Lemma |2.3| , these tensor products 
of the vectors l^. 3 ) are unit vectors and pairwise orthogonal. The unitary operations in 
the sets M.^. (for paths itj of the form @), which are postponed to the end, do not change 
the lengths of \M) and \N). Thus, as far as the computation of the Boolean function 
f p is concerned, we can ignore all the postponed unitary operations. For this reason we 
construct the circuit F p from the formula F p by eliminating all postponed operations in 
M.n ., substituting for each path iij of the form (Q) the companion qubits in Q nj by four 
new qubits, and the unitary operation (f|) by the operation defined as 

K> ® |ax) ® 10000) — £ E \co) ® h) ® |j> ■ (6) 

c ,cie{o,i} o<i<i5 

The output of the circuit F p , instead of fl5|), is of the form 

|0) ® \M') + |1) ® \N') , (7) 
where |||M)|| = |||M')|| and \\\N)\\ = \\\N')\\. So the circuit ^computes f p . Moreover, 

size(F p ) = Ofa), 

and for another assignment r, the corresponding circuit F T differs from F p only at unitary 
operations defined by 

The above discussion implies that aj, the number of subfunctions on Sj, is at most the 
number of different Boolean functions computed by size O(sj) quantum circuits. Therefore, 
by Theorem 2TT , we get 

So Sj = Q(log(crj)/loglog(cTj)). Now the theorem follows from (|l|). □ 



To apply the general bound of the above theorem, we could consider any of the several 
explicit functions used in the case of Boolean formulas (see |7|] and [JHI ). As we mentioned 
in the beginning of this section, we consider the Element Distinctness function ED n . For 
this function <x,- > i^ 1 , where £ — fl(n/ logn). Therefore, we get the lower bound Q(£ 2 ) = 
Vt{n 2 1 log 2 n) for the formula size. 

Theorem 3.2 Any quantum formula computing ED n has size f2(n 2 /log 2 n). 
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4 Concluding Remarks 



We extend a classical technique for proving lower bound for Boolean formula size to quan- 
tum formulas. The difficult part was to effectively deal with the phenomenon of entangle- 
ment of qubits. While we have been successful in extending a classical technique to the 
quantum case, the challenges encountered indicate that in general the problem of extending 
methods of Boolean case to the quantum case may not have simple solutions. For example, 
even the seemingly simple issue of the exact relationship between quantum formulas and 
quantum circuits has not been resolved. In the Boolean case, simulation of circuits by 
formulas is a simple fact, but in the quantum case it is not clear whether every quantum 
circuit can be simulated by a quantum formula. In particular, it is not clear that in the 
process of going from quantum circuits to formulas, how we can modify the underlying 
entanglement of qubits while keeping the probability of reaching to the final answer the 
same. 
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A Appendix: Counting the number of Boolean func- 
tions computed by quantum circuits of a given size 

In this appendix we prove the following upper bound. 

Theorem A.l The number of different n-variable Boolean functions that can be computed 
by size N quantum circuits (n < N) with d-input d-output elementary gates (for some 
constant d) is at most 2°(™ A 0+°( Jvl °s A . 

Our proof is based on Warren's bound on the number of different sign-assignments to 
real polynomials flBfl . We begin with some necessary notations. 



Let P\{x\, ... , Xt), . . . , P m {xi, . . • , Xt) be real polynomials. A sign-assignment to these 
polynomials is a system of inequalities 

Pi{xi,... ,x 4 )AiO,... ,P m (xi,... ,x t )A m 0, (8) 
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where each Aj is either "<" or ">" . The sign-assignment (|]) is called consistent if this 
system has a solution in K*. 



Theorem A. 2 (Warren |T3[) Let Px(xx, ■ ■ ■ , x t ), . . . , P m (xi, . . . , x t ) be real polynomials, 
each of degree at most d. Then there are at most (Aedm/t) 1 consistent sign-assignments of 
the form (H) . 



We are now ready to prove Theorem 2.1. We consider the class of quantum circuits of 



size iV with d— bit gates computing n-variable Boolean functions. Without loss of generality, 
we can assume that n', the number of input wires of such circuits, is at most d-N. We define 
an equivalence relation 1X1 on such circuits: we write C\ IX C*2 if and only if C\ and C2 differ 
only in the label of their gates; in another word, C\ and C2 have the same underlying graph 
but the corresponding gates in these circuits may compute different unitary operations. The 
number of different equivalence classes is at most 



N 

n' ' 



d 



< (dN) dN = 2°( Ario § Ar ). 



Now we find an upper bound for the number of different Boolean functions that can be 
computed by circuits in the same equivalence class. Fix an equivalence class S. We use 
the variables ax + ibx,a 2 + ib 2 , ■ ■ ■ , Op + ibp, where /1 = 2 2d N, to denote the entries of the 
matrices of the gates of a circuit C in £. By substituting appropriate values to the variables 
di, . . . , a M , 61, . . . , we get all circuits in £. On input a = (ax, . . . , a n ) G {0, l} n , the 
probability that C outputs 1 can be represented by a real polynomial P a (ax, ■ ■ ■ , a M , bx, ■ ■ ■ ,b^) 
The degree of P a is at most iV 2 . There are 2 n polynomials P a and the number of different 
Boolean functions can be computed by C by changing the unitary operators of its gates is 
at most the number of different consistent sign-assignments to the following system: 

P a (ax, ■ ■ ■ , a M , 61, . . . , bp) - § and P a (ax, . . . , a M , 61, . . . , bp) - \, a e {0, l} n . 



By Theorem [A.2| this number is bounded from the above by 
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20{nN)+0{N "log N) ^ 
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